npm - openzoo - Versions diffs - 0.43.8 → 0.44.0 - Mend

openzoo 0.43.8 → 0.44.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/lib/grokui.mjs CHANGED Viewed

@@ -529,7 +529,7 @@ const APP_HTML = `<!doctype html>
   .tname { font-size: 14px; font-weight: 500; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
   .tprev { font-size: 12px; color: #8e8e93; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
   .tdot { width: 8px; height: 8px; border-radius: 50%; background: #0a84ff; flex: 0 0 8px; }
-  #main { flex: 1; display: flex; flex-direction: column; height: 100vh; }
+  #main { flex: 1; min-width: 0; display: flex; flex-direction: column; height: 100vh; }
   #chatHeader { padding: 14px 20px; border-bottom: 1px solid #1c1c1e; display: flex; align-items: center; gap: 10px;
                 font-weight: 600; }
   #chatHeader .tavatar { width: 26px; height: 26px; border-radius: 7px; font-size: 11px; flex: 0 0 26px; }
@@ -549,16 +549,23 @@ const APP_HTML = `<!doctype html>
   #hud .hember { color: #f28c4d; }
   #hud .hfoot { border-top: 1px solid #333340; margin-top: 10px; padding-top: 8px; color: #999aa8; font-size: 10px; }
   #sidebar, #main { -webkit-app-region: no-drag; }
-  #log { flex: 1; overflow-y: auto; padding: 20px 24px 12px; display: flex; flex-direction: column; gap: 6px;
+  #log { flex: 1; min-width: 0; overflow-y: auto; overflow-x: hidden; padding: 20px 24px 12px;
+         display: flex; flex-direction: column; gap: 6px;
          -webkit-user-select: text; user-select: text; }
   .hdr { align-self: flex-start; display: flex; align-items: center; gap: 6px; margin: 12px 0 4px;
          color: #8e8e93; font-size: 13px; }
   .hdr .avatar { width: 18px; height: 18px; border-radius: 5px; display: flex; align-items: center;
                  justify-content: center; color: #fff; font-size: 9px; font-weight: 700; }
-  .row { display: flex; max-width: 78%; margin: 2px 0; }
+  /* min-width:0 is load-bearing. A flex item defaults to min-width:auto, so it
+     refuses to shrink below its content's intrinsic width — one long
+     unbreakable line (a curl command, a JSON blob) in a <pre> then stretches
+     the row past max-width, widens the whole column, and pushes the header's
+     cost button off-screen. */
+  .row { display: flex; max-width: 78%; min-width: 0; margin: 2px 0; }
   .row.user { align-self: flex-end; }
   .row.bot { align-self: flex-start; }
   .bubble { padding: 11px 16px; border-radius: 20px; white-space: pre-wrap; word-break: break-word;
+            min-width: 0; max-width: 100%; overflow-x: hidden;
             -webkit-user-select: text; user-select: text; cursor: text; }
   .bubble a { color: #6ab0ff; text-decoration: underline; cursor: pointer; }
   /* rendered markdown. The bubble is pre-wrap for plain text, but block
@@ -582,7 +589,8 @@ const APP_HTML = `<!doctype html>
   .md-table th { background: #1c1c1e; font-weight: 600; }
   .bubble-images { display: flex; gap: 6px; flex-wrap: wrap; margin-bottom: 8px; }
   .bubble-images img { max-width: 160px; max-height: 160px; border-radius: 12px; display: block; }
-  .runcard { background: #1c1c1e; border: 1px solid #333; border-radius: 14px; padding: 12px 14px; max-width: 100%; }
+  .runcard { background: #1c1c1e; border: 1px solid #333; border-radius: 14px; padding: 12px 14px;
+             max-width: 100%; min-width: 0; overflow: hidden; }
   .runcmd { font-family: Menlo, monospace; font-size: 12.5px; color: #ececec; white-space: pre-wrap;
             word-break: break-word; margin-bottom: 8px; }
   .runactions { display: flex; gap: 8px; }

package/lib/namespace.js CHANGED Viewed

@@ -15,26 +15,30 @@ import { loadOrCreateWallet } from './wallet.js';
  * restarts and reveal nothing. It is hashed again server-side, so the value on
  * the wire is not the address either.
  *
- * OPT-IN (OPENZOO_NAMESPACE=1), and off by default, deliberately.
- *
- * Isolation is only sound if EVERY surface agrees on the namespace. In
- * practice they do not: the MCP server, the CLI and the proxy are separate
- * processes that a user upgrades at different times (npx happily serves a
- * stale cached build), so a corpus bound by a namespaced `zoo_bind` became
- * invisible to a chat sent through an older proxy — the context vanished,
- * every spill bind returned 400, and the gateway fell open and forwarded the
- * whole body at full price. MEASURED twice in one session, in both directions.
- *
- * A header the client controls was the wrong mechanism: real isolation should
- * key off the settling payer, which the gateway already knows and cannot get
- * out of sync. Until that exists, defaulting off restores the behaviour that
- * always worked, and the gateway's fallback keeps namespaced contexts
- * reachable for anyone who opts in.
+ * ALWAYS ON. There is no flag.
+ *
+ * It used to be opt-in and off, because a header the client merely ASSERTED
+ * was the wrong mechanism: the surfaces disagree in practice (the MCP server,
+ * the CLI and the proxy are separate processes upgraded at different times,
+ * and npx happily serves a stale cached build), so a corpus bound by a
+ * namespaced `zoo_bind` went invisible to a chat sent through an older proxy —
+ * the context vanished, spill binds 400'd, and the gateway fell open and
+ * forwarded the whole body at full price. MEASURED twice in one session.
+ *
+ * That objection was about an UNVERIFIED claim and no longer holds: the value
+ * is signed (see signNamespace) and the gateway REQUIRES the signature,
+ * deriving the tenant from the proven signer. A flag was worse than useless
+ * here — off meant every caller shared one tenant, where a context is
+ * protected only by its id being unguessable and anyone may write into the
+ * same space, and a flag that is sometimes off is exactly the version skew
+ * that made contexts vanish. One behaviour, every surface, always.
+ *
+ * BREAKING: corpora bound before this lived in the shared tenant and are not
+ * reachable from a signed request. Re-bind them.
  */
 let cached = null;
 export function namespaceHeaderValue() {
-  if (process.env.OPENZOO_NAMESPACE !== '1') return '';
   if (cached) return cached;
   try {
     const w = loadOrCreateWallet();
@@ -47,8 +51,67 @@ export function namespaceHeaderValue() {
   return cached;
 }
-/** Merge the namespace header into any headers object. */
+/**
+ * PROVE the namespace claim instead of merely asserting it.
+ *
+ * The header above is derived from the PUBLIC key, so on its own it is not
+ * authentication: anyone who knows this wallet's address can recompute the
+ * same value and land in the same sidecar tenant — and since the sidecar gates
+ * context access purely on tenant match, that is the whole door. The gateway
+ * (nsauth.ts) verifies a signature over `openzoo-namespace:<ns>:<ts>` and
+ * derives the tenant from sha256(chain:signer:namespace), which binds the
+ * PROVEN signer in, so another wallet signing an identical label lands
+ * somewhere else.
+ *
+ * Signed with the same Solana key x402 already pays from — no new secret, and
+ * nothing leaves the machine but a public key and a signature. The timestamp
+ * is what bounds replay (the gateway enforces its own window), so it is minted
+ * per call and these headers are deliberately NOT cached.
+ */
+const PKCS8_ED25519_PREFIX = Buffer.from('302e020100300506032b657004220420', 'hex');
+function signNamespace(namespace) {
+  const w = loadOrCreateWallet();
+  const timestamp = String(Date.now());
+  // Node has no raw-ed25519 signer, but it will build one from a PKCS8 DER
+  // wrapper around the 32-byte seed (a Solana secretKey is seed||pubkey).
+  const der = Buffer.concat([PKCS8_ED25519_PREFIX, Buffer.from(w.keypair.secretKey.slice(0, 32))]);
+  const key = crypto.createPrivateKey({ key: der, format: 'der', type: 'pkcs8' });
+  const sig = crypto.sign(null, Buffer.from(`openzoo-namespace:${namespace}:${timestamp}`), key);
+  return {
+    'x-openzoo-namespace-sig': base58encode(sig),
+    'x-openzoo-namespace-signer': w.keypair.publicKey.toBase58(),
+    'x-openzoo-namespace-ts': timestamp,
+    'x-openzoo-namespace-chain': 'solana',
+  };
+}
+/** Merge the namespace header — and its proof — into any headers object. */
 export function withNamespace(headers = {}) {
   const ns = namespaceHeaderValue();
-  return ns ? { ...headers, 'x-openzoo-namespace': ns } : headers;
+  if (!ns) return headers;
+  // No unsigned fallback. The gateway REQUIRES the signature, so a bare
+  // namespace buys nothing — it would just be silently demoted to the shared
+  // tenant, which looks like "my corpus vanished" instead of a clear failure.
+  return { ...headers, 'x-openzoo-namespace': ns, ...signNamespace(ns) };
+}
+// Bitcoin-alphabet base58, matching what the gateway's bs58 decode expects.
+// Local rather than a dependency for the same reason lib/x402.js keeps its own.
+const B58 = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
+function base58encode(bytes) {
+  const digits = [0];
+  for (const byte of bytes) {
+    let carry = byte;
+    for (let j = 0; j < digits.length; j++) {
+      carry += digits[j] << 8;
+      digits[j] = carry % 58;
+      carry = (carry / 58) | 0;
+    }
+    while (carry > 0) { digits.push(carry % 58); carry = (carry / 58) | 0; }
+  }
+  let out = '';
+  for (const b of bytes) { if (b === 0) out += '1'; else break; } // leading zeros
+  for (let i = digits.length - 1; i >= 0; i--) out += B58[digits[i]];
+  return out;
 }

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.43.8",
+  "version": "0.44.0",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",